Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string in (1) C++ or (2) Java source code.
Weakness
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | * | 10.5.3 (including) |
| Mac_os_x | Apple | 10.4.1 (including) | 10.4.1 (including) |
| Mac_os_x | Apple | 10.4.2 (including) | 10.4.2 (including) |
| Mac_os_x | Apple | 10.4.3 (including) | 10.4.3 (including) |
| Mac_os_x | Apple | 10.4.4 (including) | 10.4.4 (including) |
| Mac_os_x | Apple | 10.4.5 (including) | 10.4.5 (including) |
| Mac_os_x | Apple | 10.4.6 (including) | 10.4.6 (including) |
| Mac_os_x | Apple | 10.4.7 (including) | 10.4.7 (including) |
| Mac_os_x | Apple | 10.4.8 (including) | 10.4.8 (including) |
| Mac_os_x | Apple | 10.4.9 (including) | 10.4.9 (including) |
| Mac_os_x | Apple | 10.4.10 (including) | 10.4.10 (including) |
| Mac_os_x | Apple | 10.4.11 (including) | 10.4.11 (including) |
| Mac_os_x | Apple | 10.5 (including) | 10.5 (including) |
| Mac_os_x | Apple | 10.5.1 (including) | 10.5.1 (including) |
| Mac_os_x | Apple | 10.5.2 (including) | 10.5.2 (including) |
| Mac_os_x_server | Apple | * | 10.5.3 (including) |
| Mac_os_x_server | Apple | 10.4.1 (including) | 10.4.1 (including) |
| Mac_os_x_server | Apple | 10.4.2 (including) | 10.4.2 (including) |
| Mac_os_x_server | Apple | 10.4.3 (including) | 10.4.3 (including) |
| Mac_os_x_server | Apple | 10.4.4 (including) | 10.4.4 (including) |
| Mac_os_x_server | Apple | 10.4.5 (including) | 10.4.5 (including) |
| Mac_os_x_server | Apple | 10.4.6 (including) | 10.4.6 (including) |
| Mac_os_x_server | Apple | 10.4.7 (including) | 10.4.7 (including) |
| Mac_os_x_server | Apple | 10.4.8 (including) | 10.4.8 (including) |
| Mac_os_x_server | Apple | 10.4.9 (including) | 10.4.9 (including) |
| Mac_os_x_server | Apple | 10.4.10 (including) | 10.4.10 (including) |
| Mac_os_x_server | Apple | 10.4.11 (including) | 10.4.11 (including) |
| Mac_os_x_server | Apple | 10.5 (including) | 10.5 (including) |
| Mac_os_x_server | Apple | 10.5.1 (including) | 10.5.1 (including) |
| Mac_os_x_server | Apple | 10.5.2 (including) | 10.5.2 (including) |
| Binutils | Ubuntu | dapper | * |
| Binutils | Ubuntu | feisty | * |
| Binutils | Ubuntu | gutsy | * |
| Binutils | Ubuntu | hardy | * |
| Binutils | Ubuntu | upstream | * |
Potential Mitigations
Related Attack Patterns
References
- http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
- http://secunia.com/advisories/30802
- http://securitytracker.com/id?1020392
- http://support.apple.com/kb/HT2163
- http://www.securityfocus.com/bid/30018
- http://www.vupen.com/english/advisories/2008/1981/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43494
- http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
- http://secunia.com/advisories/30802
- http://securitytracker.com/id?1020392
- http://support.apple.com/kb/HT2163
- http://www.securityfocus.com/bid/30018
- http://www.vupen.com/english/advisories/2008/1981/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43494